This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45af2dd7-d883-3b6c-bbc4-6ff062bf2228.roa File: 45af2dd7-d883-3b6c-bbc4-6ff062bf2228.roa (raw, json) Hash identifier: t1EXrCzgq/qfQkQ6VtH1A9QA43jLg2Y7OopQ9ZfVBS8= Subject key identifier: C3:EB:74:89:A4:61:13:9D:9B:48:00:FD:96:98:2F:26:44:38:E9:17 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBC65136277BAE8FE6C800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45af2dd7-d883-3b6c-bbc4-6ff062bf2228.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 72.201.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:c6:51:36:27:7b:ae:8f:e6:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=1d5aba95-3de0-472f-8d50-ccd4ac21e2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:98:fd:6e:bc:1b:90:42:2c:a7:f2:82:78: 1c:4f:30:76:82:0c:ae:c0:29:d7:fd:2d:1d:34:a8: 74:03:5b:bb:2a:97:78:e2:2f:fb:0c:59:12:67:99: 5f:df:64:63:6c:c5:1e:69:25:c9:78:55:29:7b:3e: 3b:9e:9f:9f:63:64:33:58:18:1a:3f:d6:a3:e4:27: 8e:ec:b8:9f:90:da:2e:23:1b:18:98:13:02:31:e8: 56:23:a3:1b:ae:df:f3:ff:49:6e:45:65:fc:6a:3c: db:e4:f8:d3:cf:77:7f:80:59:ae:cc:1c:9f:c3:ff: 41:70:e7:58:28:de:30:21:af:06:b9:2f:33:8b:6b: 6f:71:84:22:5a:f3:7d:c9:1c:13:07:f9:9c:aa:a1: 49:ea:e9:11:e9:a7:f5:0c:6c:3a:c2:66:10:e9:19: 85:dd:86:f3:bf:e4:44:dc:9b:a0:b7:c4:b6:08:77: 4e:7b:f3:86:2c:90:f5:f5:55:b5:01:f8:9a:45:7a: 99:03:20:a3:6a:a1:32:12:90:2e:95:b5:93:bc:6f: 77:f7:ba:eb:21:10:b9:8c:df:74:7a:02:e1:f7:91: cc:3c:6c:3c:a8:ae:bb:2b:4d:61:fc:0f:6c:dd:3a: 55:32:fc:fd:aa:06:92:81:46:4e:bc:b7:8c:1e:7a: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:74:89:A4:61:13:9D:9B:48:00:FD:96:98:2F:26:44:38:E9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45af2dd7-d883-3b6c-bbc4-6ff062bf2228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:36:9c:1d:9a:aa:6d:ae:f3:5c:f1:a5:17:97:39:60:3c:e0: 49:0c:48:0d:0a:00:2a:1a:9b:3c:63:83:ce:1b:63:75:68:6b: 07:95:c0:62:c9:b1:62:88:fd:1d:65:e4:d6:6e:54:05:68:27: 5a:b9:48:65:42:0d:1e:7a:93:49:3e:41:cb:03:a3:19:4d:63: b3:aa:8e:ff:94:e1:5c:5f:da:eb:09:8c:81:17:0e:fb:6b:1c: eb:16:c0:9a:be:2d:d3:8d:c5:17:2f:1a:09:40:e6:06:88:36: d5:6c:25:b6:a7:7d:27:4d:3c:23:61:36:ff:ee:2b:2e:6c:34: 81:23:f8:69:ad:25:3d:e2:03:7c:cf:6a:b3:1a:04:22:d3:e3: 57:8b:43:a4:0d:31:8d:aa:bf:8f:1f:f3:bb:e4:a3:8a:0f:4e: 1c:2f:a9:be:c2:08:b6:c1:aa:17:e5:e3:7f:b0:b1:f5:c3:c4: 7e:00:28:62:1c:87:63:0e:89:0c:31:72:a1:80:ee:0f:ad:9a: 44:e2:4d:81:69:77:b2:bd:04:d3:bb:df:33:9d:f7:a1:45:86: 3e:0d:f5:a7:cd:fb:e7:66:54:2b:40:e3:a7:b4:2e:48:b3:60: 55:5f:f3:50:a9:80:23:8b:a4:16:1c:c9:9d:1a:c3:75:b4:14: 4a:19:1a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/28ZRNid7ro/myAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MWQ1YWJhOTUtM2RlMC00NzJmLThkNTAtY2NkNGFjMjFlMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3WY/W68G5BCLKfygngcTzB2ggyuwCnX/S0d NKh0A1u7Kpd44i/7DFkSZ5lf32RjbMUeaSXJeFUpez47np+fY2QzWBgaP9aj5CeO 7LifkNouIxsYmBMCMehWI6Mbrt/z/0luRWX8ajzb5PjTz3d/gFmuzByfw/9BcOdY KN4wIa8GuS8zi2tvcYQiWvN9yRwTB/mcqqFJ6ukR6af1DGw6wmYQ6RmF3Ybzv+RE 3Jugt8S2CHdOe/OGLJD19VW1AfiaRXqZAyCjaqEyEpAulbWTvG9397rrIRC5jN90 egLh95HMPGw8qK67K01h/A9s3TpVMvz9qgaSgUZOvLeMHnrceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPrdImkYROdm0gA/ZaYLyZEOOkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDVhZjJkZDctZDg4My0z YjZjLWJiYzQtNmZmMDYyYmYyMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo2nB2aqm2u81zxpReXOWA84EkMSA0KACoamzxjg84bY3VoaweVwGLJ sWKI/R1l5NZuVAVoJ1q5SGVCDR56k0k+QcsDoxlNY7Oqjv+U4Vxf2usJjIEXDvtr HOsWwJq+LdONxRcvGglA5gaINtVsJbanfSdNPCNhNv/uKy5sNIEj+GmtJT3iA3zP arMaBCLT41eLQ6QNMY2qv48f87vko4oPThwvqb7CCLbBqhfl43+wsfXDxH4AKGIc h2MOiQwxcqGA7g+tmkTiTYFpd7K9BNO73zOd96FFhj4N9afN++dmVCtA46e0Lkiz YFVf81CpgCOLpBYcyZ0aw3W0FEoZGiQ= -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:48 2025 by rpki-client